Senior Technical Security Specialist

Senior Technical Security Specialist

Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. The company is defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb employs approximately 40,000 people worldwide.

Chubb launched its third Engineering Center in Thessaloniki in 2022. Our rapidly expanding new Chubb Engineering Center in Greece (CECG) is integrated with the Engineering Centers in India and Mexico to support our global technology needs and digital business transformation, as well as the company's operations in the Europe - Middle East - Africa region operating in 27 countries.
Currently, Chubb is looking for a Senior Technical Security Specialist to join our team in Thessaloniki. This role serves as the designated security advisor and assessor, ensuring that technology initiatives within infrastructure, applications, networks, Cloud environments etc. are implemented in line with security standards. The specialist embeds security throughout the IT solution lifecycle: consulting on, assessing and approving design decisions, security implications, proposed controls and flagging insecure practices and supervising their remediation across the lifecycle. Among other things, the specialist is expected to actively identify opportunities to improve the consistency, coverage, and throughput of the security function through adoption and enhancements to documentation, training and awareness, and AI tooling.

The role requires technical depth across endpoint, network, Cloud, and identity security disciplines, enabling among others credible scrutiny of application data flows, access management principles, encryption mechanisms and technical infrastructure controls. The specialist must translate complex technical findings into clear, actionable risk guidance for engineering teams and executive stakeholders alike.

 Responsibilities: 

• Review and challenge security changes across architecture, network, endpoint, cloud, and identity areas before approval.
• Identify misconfigurations, security weaknesses, and policy gaps in proposed designs and changes.
• Apply key principles such as least privilege, defense in depth, zero trust, and secure-by-default.
• Perform threat modelling for significant changes and challenge hidden assumptions before sign-off.
• Review firewall rules, traffic flows, segmentation, remote access, DNS, and NTP changes for security impact.
• Check cloud, container, Kubernetes, SaaS, and identity changes for risks such as excessive permissions, weak logging, missing encryption, and poor access control.
• Review privileged access, Active Directory, Entra ID, service accounts, and non-human identities for escalation or governance risks.
• Use AI and automation for repetitive security checks, but validate outputs carefully.
• Recognize the limits of AI in context-specific judgment and risk decisions.
• Work with engineering teams to define automation scope and human validation points.
• Track findings, follow up on remediation, and escalate unresolved or recurring risks.
• Identify repeated issues and feed them back into standards, policies, and review guidance.
• Maintain a security findings tracker and knowledge base of decisions and precedents.
• Communicate risks clearly to different audiences and produce concise, audit-ready review outputs.
• Facilitate review sessions and provide practical, evidence-based remediation guidance.
• Contribute to security checklists, standards, guardrails, and continuous improvement efforts.

Qualifications: 

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
• 7+ years in information security with a primary focus on security operations, architecture, engineering or technical security assurance and governance.
• Working knowledge of security frameworks relevant to EMEA financial services: ISO 27001, NIST CSF 2.0, CIS Controls, PCI DSS, DORA.
• Hands-on experience reviewing firewall rule sets across enterprise platforms (mainstream security tooling platform) — able to identify over-permissive rules, shadow rules, and lateral movement paths independently of vendor tooling.
• Demonstrated ability to trace and validate application secure traffic flows: TLS version and cipher validation, proxy/SSL inspection bypass analysis, load balancer SSL termination, API gateway mTLS, and certificate chain verification.
• Endpoint security experience with major EDR/XDR platforms — able to assess sensor coverage, detection policy scope, and agent deployment changes.
• Cloud security experience across at least one major provider (AWS, Azure, or GCP) — covering IAM policy review, security group/NSG analysis, CSPM tooling, cloud-native audit logging, and container/Kubernetes security controls.
• Identity and access management experience — reviewing IAM role assignments, PAM vaulting configurations, conditional access policies, MFA enforcement gaps, and non-human identity lifecycle controls in Active Directory and/or Entra ID environments.
• Experience working alongside a formal deviation/exception management function — flagging insecure practices, providing technical risk input to deviation assessments, and tracking remediation status through to closure without owning the formal exception process.
• Proven track record of escalating technical security risk to senior stakeholders with written risk communications consumable by non-technical decision-makers.
• Relevant certifications such as CISSP or CISM.

Our team makes the difference, every time. For this reason, we offer in return!
We offer explicit, structured career development, a competitive salary package, annual bonus, long term equity incentives, private medical cover, monthly allowance for lunch, generous personal time off, continuous learning experiences, and work in a fun, lively environment with mentoring from our groundbreaking senior mentors.
Integrity. Client Focus. Respect. Excellence. Teamwork
Our core values instruct how we live and work. We’re an ethical and honest company that’s wholly committed to its clients. A business that’s engaged in mutual trust and respect for its employees and partners. A place where colleagues perform at the highest levels. And a working environment that’s collaborative and encouraging.
Diversity & Inclusion
At Chubb, we consider our people our chief competitive advantage and as such we treat colleagues, candidates, clients, and business partners with equality, fairness and respect, regardless of their age, disability, race, religion or belief, gender, sexual orientation, marital status or family circumstances. We earnestly strive to achieve an environment where all colleagues feel comfortable to perform to their full potential and are recognized for their contributions.
Many voices, One Chubb!